polymarketv2[.]com

The domain polymarketv2.com is currently flagged as a generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain resolves to the IP address 216.198.79.1, which is hosted in the United States and belongs to ASN 16509, Amazon.com, Inc. The authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com, and the domain was registered through NameCheap, Inc. on December 23, 2025. The site utilizes Vercel as its hosting platform and enforces HTTP Strict Transport Security (HSTS). An SSL certificate issued by Let’s Encrypt (R13) is present, but the sole visible page returns an HTTP 404 status with the title "404: NOT_FOUND," indicating that no content is currently served.

Threat intelligence indicates the domain appears on one security blocklist and has been blocked by the PhishDestroy service. A Gridinsoft trust score of 1 out of 100 further corroborates the low credibility of the host. VirusTotal analysis shows that 14 out of 93 scanned security vendors have identified the domain as malicious, reinforcing the phishing classification. While the domain is presently taken offline, its recent creation date and rapid addition to blocklists suggest a short‑lived deployment typical of phishing infrastructure.

Defenders should continue to block the domain at perimeter devices, update URL filtering policies, and monitor for any re‑activation or similar domains registered by the same registrar. Additional scrutiny of traffic to the associated IP range within the Amazon cloud should be considered, as the infrastructure could be repurposed for other malicious campaigns. The current evidence does not reveal the specific target brand or payload, so further passive DNS and sinkhole monitoring is recommended to capture any future activity linked to polymarketv2.com.